VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 21, 2011· Updated Apr 29, 2026

CVE-2011-1046

CVE-2011-1046

Description

IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged property of an object via unspecified vectors.

Affected products

14
  • IBM/Filenet P8 Content Engine12 versions
    cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.10:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.12:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.0.1.13:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:4.5.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:filenet_p8_content_engine:5.0.0:*:*:*:*:*:*:*
  • IBM/Filenet P8 Business Process Manager
    cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*
  • IBM/Filenet P8 Content Manager
    cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.